CVE-2026-25491
Craft has a Stored XSS in Entry Types Name
概要
Craft has a Stored XSS in Entry Types Name
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Craft is a platform for creating digital experiences. From 5.0.0-RC1 to 5.8.21, Craft has a stored XSS via Entry Type names. The name is not sanitized when displayed in the Entry Types list. This vulnerability is fixed in 5.8.22.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com